Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
File: sCS1dKJD6FPfLfBUycnwke1H8aE.mft (raw, json)
Hash identifier: Z/IRra3OXfWyhssP2y/OngXqVDE94BS4LHprdZDnB/g=
Subject key identifier: 34:07:6C:14:E2:AC:6A:37:60:F5:F6:CA:C6:A1:9E:FC:E3:8F:B6:44
Authority key identifier: B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
Certificate issuer: /CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Certificate serial: 019F935B49F0141505270C74D2482C65E478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:01 +0000
Manifest this update: Fri 24 Jul 2026 09:01:01 +0000
Manifest next update: Sat 25 Jul 2026 09:01:01 +0000
Files and hashes: 1: oqX2gExMo-KlgfeVjBQNl-V9kYQ.roa (hash: AhjEc5iJ0saymH9KLRkLm0lyxGwUZpd99G/NbAW7jGw=)
2: sCS1dKJD6FPfLfBUycnwke1H8aE.crl (hash: s8vAhoP0lQmVsPARsFkZiHGRuklGc9HdEzJKHow+cT4=)
3: wcZFZKJuAQyp04XCR7u-DhFRd3A.roa (hash: 5hph13qMNz8BJaZ5fOJ0lHqfAydPPEugNlEoJOSv5SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:49:f0:14:15:05:27:0c:74:d2:48:2c:65:e4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Validity
Not Before: Jul 24 09:01:01 2026 GMT
Not After : Jul 25 09:01:01 2026 GMT
Subject: CN=34076c14e2ac6a3760f5f6cac6a19efce38fb644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:09:b0:ea:71:95:a7:95:90:2c:fd:0a:2e:
b8:27:4a:de:de:4a:0b:5e:23:ed:a9:a7:28:48:d5:
2f:56:3e:e1:43:a1:29:59:72:bc:e2:34:77:75:e4:
1b:61:84:2e:ba:3b:7b:1d:d3:86:b8:e1:f5:0e:46:
80:e7:36:e0:1b:39:7b:a4:fa:c8:5e:16:ec:00:b8:
95:2f:d0:3f:3b:a5:98:9f:3e:98:be:ff:ab:cd:2e:
ca:12:ea:00:f2:69:d3:b0:d9:97:25:1e:16:e1:c7:
2b:16:1d:70:aa:5f:9e:81:0b:82:2e:34:aa:b4:d1:
65:c1:dd:33:23:59:e8:c7:42:0d:ac:b7:cf:1c:3e:
cb:5d:e3:60:c5:04:a8:a7:fa:65:bc:22:a6:12:29:
7e:18:c4:cc:4b:e5:03:71:ed:2b:11:48:fd:2d:cd:
06:5a:10:ad:a5:3d:58:d8:ed:6a:e6:7c:71:19:ae:
14:b2:89:fe:98:32:b5:10:32:7f:e5:2e:12:59:95:
78:4f:06:8c:09:14:4a:37:0b:d4:36:18:6e:24:30:
91:d9:ae:b8:9e:61:ce:6a:e0:5e:ac:9b:dd:b6:b5:
51:43:cb:70:6c:88:a9:14:ea:68:22:7b:f0:2f:fb:
22:df:67:d5:eb:8e:67:a7:0c:c4:82:73:60:74:9f:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:07:6C:14:E2:AC:6A:37:60:F5:F6:CA:C6:A1:9E:FC:E3:8F:B6:44
X509v3 Authority Key Identifier:
keyid:B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:93:c5:33:a1:f6:6f:e0:72:4f:9f:b2:a3:08:fa:c6:d2:60:
cb:d1:f8:d7:cb:5a:c5:43:d7:61:d7:c6:b7:3a:5c:41:e2:81:
83:de:e8:66:11:32:47:fe:6b:3b:b4:3d:1e:78:2a:a1:72:4e:
cc:3d:ed:16:77:a8:56:63:76:34:41:be:36:7d:94:e6:27:01:
3a:f1:02:fe:1b:ac:3b:b9:45:6f:db:9a:92:6d:16:c4:63:3c:
99:6a:3b:6f:79:7b:36:4e:4a:c9:44:d5:f1:f0:10:0e:33:d0:
f4:96:aa:89:ef:43:fd:a7:5f:81:eb:ad:03:ea:13:ac:ce:84:
25:0c:37:a1:a5:99:2a:8d:39:c6:ec:0e:64:50:bd:b0:88:47:
f1:e5:ec:1b:74:60:8d:6d:36:13:86:8d:1b:a6:ed:5f:97:1f:
65:81:cc:6d:12:87:55:91:08:a9:f3:93:81:2c:99:9d:42:74:
03:45:42:e2:71:8e:51:75:15:93:63:fc:55:17:eb:49:0d:f7:
0c:27:3b:d4:af:45:f4:92:64:a4:73:29:69:46:5a:6d:ed:5d:
cc:f9:b9:3f:4d:fb:5e:52:68:be:61:3a:43:46:dd:84:06:1e:
fc:6b:b4:9d:66:4c:1b:3a:13:85:79:36:9e:55:ed:50:aa:a3:
0b:10:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:01 2026 by rpki-client